Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdd33562-2653-4549-84dc-25f96aa10a83.roa
File: bdd33562-2653-4549-84dc-25f96aa10a83.roa (raw, json)
Hash identifier: mBvqjZIi+RXpKqXdh2mI54Gd9VAVXFKVIKdnFV7nl/I=
Subject key identifier: F3:E3:30:26:9E:7F:4C:04:0D:74:E6:6A:24:3A:D1:58:9C:F5:6B:03
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3307195C9DC44E1A1FB6EDC57B6746E0F171CA12
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdd33562-2653-4549-84dc-25f96aa10a83.roa
Signing time: Wed 05 Mar 2025 17:50:19 +0000
ROA not before: Wed 05 Mar 2025 17:50:19 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d021::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:07:19:5c:9d:c4:4e:1a:1f:b6:ed:c5:7b:67:46:e0:f1:71:ca:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:50:19 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1c:53:56:fe:fc:2b:3c:3e:30:49:15:95:60:
2c:0e:98:c8:18:5c:7e:bb:7d:65:7c:3b:69:29:53:
ca:0b:b5:ad:15:a8:56:76:c8:47:58:34:74:8e:3f:
e2:b7:ff:d7:54:b5:e8:5d:c5:8e:de:db:86:6e:b8:
0a:01:93:07:84:57:09:c4:3f:01:c8:28:2f:ed:06:
bc:f6:d0:45:cc:a6:6f:21:f6:af:26:f6:82:9e:8c:
16:bd:03:86:62:0b:fb:a3:41:82:13:6c:6b:4c:00:
97:dc:0f:ae:4f:6d:df:c2:41:8f:66:5a:09:72:0f:
cb:c3:17:8c:20:18:fe:15:70:f3:dc:f0:89:8f:67:
39:d1:25:16:d2:0c:da:2f:28:98:a6:31:d9:44:d5:
4d:3c:6c:2c:c0:e6:7e:93:b5:34:cb:e8:36:c2:d1:
e6:3d:bd:b2:da:f1:71:13:89:72:62:cf:32:4a:af:
9c:7e:5c:df:bd:4a:0a:d1:b4:ee:33:4c:42:03:0b:
00:73:b0:c2:7a:32:1d:c9:48:8b:71:05:83:75:d8:
b9:28:f0:6e:06:20:65:07:89:88:40:18:56:1d:e8:
9a:f3:2f:62:52:54:18:e3:67:db:d5:98:6c:9e:c0:
7f:f4:e7:92:d7:a3:c6:89:a1:58:80:3d:bf:e8:29:
1f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E3:30:26:9E:7F:4C:04:0D:74:E6:6A:24:3A:D1:58:9C:F5:6B:03
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdd33562-2653-4549-84dc-25f96aa10a83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d021::/36
Signature Algorithm: sha256WithRSAEncryption
bf:41:24:eb:9d:f0:25:0e:09:3c:03:67:ad:70:04:db:04:c9:
a8:0c:2e:e7:15:7a:5e:99:ac:94:4b:ef:c8:7d:6f:69:56:28:
24:62:1e:e4:79:c4:6b:52:ca:ac:da:f6:51:c6:3a:d9:af:9f:
1f:be:01:ae:ca:bd:0d:97:5c:54:4c:47:89:0a:b9:7d:a1:b5:
cd:64:d1:68:45:58:b9:10:fb:22:15:90:3d:8e:a9:09:be:d6:
61:67:a5:84:e7:30:1d:52:b9:1b:42:1c:76:4f:61:e8:0a:9a:
9c:c6:3e:1f:72:25:85:f4:2c:17:2a:18:64:c6:1e:ad:a7:5a:
6d:9b:33:83:9a:9a:11:eb:e7:27:9f:5f:69:7d:a3:b0:d2:d8:
1f:28:9c:d3:cc:05:4f:be:cb:4d:2c:fe:5b:88:ea:cf:d5:14:
ac:15:5f:cc:cd:92:98:d9:10:d8:29:35:9f:f5:a3:38:a1:7a:
3b:1d:db:b0:9d:a4:b4:ee:ef:09:88:f7:a0:a6:10:0e:6a:99:
cf:7b:18:5d:e2:e8:2a:92:59:9b:81:8b:ed:a8:aa:52:aa:a0:
41:13:ee:90:6f:b8:d9:d2:d7:ca:ef:47:81:85:60:f4:98:a2:
a0:09:33:c3:27:ba:d9:1b:ea:09:42:87:15:27:fa:0a:ff:18:
f7:e4:0f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:08:50 2025 by rpki-client